Re: [Help-gnu-radius] Custom Attributes for Authorization

[Sergey Poznyakoff]

Oh, just forgotten to answer these:

>   Do radius check user quotas when NAS send alive packet.

By default, no. Currently this may be implemeted only using Scheme extension.

>  And can radius kick off from line user who exceed quotas.

Given the variety of existing NAS types that would be extremely
difficult to implement in a portable way. For Total-Time-Limit
quotas, this is easily done using Session-Time attribute.
That is, your authentication procedure should compute
the maximum duration of the session allowed for the given user 
and add this value to the Session-Time attribute in the reply packet.
Then the NAS will authomatically terminate the user session
when this amount of time elapses.

For another types of quotas (e.g. traffic quotas), there are
no easy way to terminate the user session. If your NAS can do
so via SNMP, then your extension program/procedure could just
send it an appropirate SNMP packet...

Regards,
Sergey